← All credits
AdamKorcz
10 vulnerability records and advisories credit this contributor.
CVE-2026-105215
ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback
CVE-2026-105212
ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment
CVE-2026-105210
ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers
CVE-2026-105209
ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment
CVE-2026-105207
ZITADEL before 4.17.3 Account Takeover via External IdP Linking
CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API
CVE-2026-56750
Gitea Remember-Me Token Theft Not Invalidating Attacker Session
CVE-2026-56657
Gitea SSH Key Parser Denial of Service
CVE-2026-56755
Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload
CVE-2026-58421
Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service